IT-04:NET-04
§7 Data in transit encrypted with industry-standard protocols; deprecated disabled
Collectors
| Collector | Relationship | Samples | What it observes |
|---|---|---|---|
| probes.http_posture | satisfies | monthly | HTTPS redirect, HSTS and security headers for every public domain |
| probes.ssh_posture | satisfies | monthly | Proves remote production access is SSH-2 only, with no unencrypted alternative |
| probes.tls_posture | satisfies | weekly | TLS protocol, cipher and certificate expiry for every public domain |
Evidence satisfying this control
| Collected | Collector | Result | Source | Digest |
|---|---|---|---|---|
| No artifact satisfies this control. | ||||